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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

1-13. (Canceled) 

14. (New) A computer-readable storage medium storing a program for 
controlling an encryption/decryption unit for encrypting a plaintext into a ciphertext 
and/or decrypting into a plaintext, the program comprising: 

first encryption/decryption means for performing an encryption or decryption 
process; 

first substitution means for performing data substitution of an output from said 
first encryption/decryption means according to a predetermined permutation table; 

second encryption/decryption means for performing an encryption or decryption 
process for an output from said first substitution means; 

second substitution means for performing data substitution of an output from said 
second encryption/decryption means according to a predetermined permutation table; 

third encryption/decryption means for performing an encryption or decryption 
process for an output from said second substitution means; 

key generating means for generating intermediate keys respectively supplied to 
said first, second, and third encryption/decryption means and said first and second 
substitution means, and 
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said first and second substitution means functioning to perform identity 
conversion when the intermediate key generated by said key generating means 
contains predetermined data; 

wherein said key generating means comprises: 

dividing means for dividing key data K of a predetermined number of bits into a 
plurality of data and storing the divided data into respective registers; 

expanded permutation means for reading out the divided key data from the 
respective registers and effecting an expanded permutation on the divided key data; 

DES-SS key schedule means for generating intermediate keys K1 and K3 from a 
result of the expanded permutation performed by said expanded permutation means; 

DES key schedule means for generating an intermediate key K2 from a result of 
the expanded permutation performed by said expanded permutation means; and 

Substitution schedule means for generating intermediate keys KK1 and KK2 from 
the contents of the registers. 

15. (New) The computer-readable storage medium according to claim 
14, wherein said expanded permutation means comprises an expanded permutation 
table for expanding input 56-bit key data into 64-bit data. 

16. (New) The computer-readable storage medium according to claim 
14, wherein said substitution schedule means receives one of the divided key data as a 
32-bit key, and outputs an intermediate key KK1 input to said first substitution means 
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and an intermediate key KK2 input to said second substitution means, said substitution 

schedule means comprising: 

first means for directly outputting the input 32-bit key as an intermediate key KD1 

of said first substitution means, calculating a logical OR of the Intermediate key, and 

outputting the logical OR as an intermediate key KS1 (one bi) of said first substitution 

means; and 

second means for shifting the input 32-bit key to the left to output the key as an 
intermediate key KD2 of said second substitution means, and calculating a logical OR of 
the intermediate key KD2 to output the key as an intermediate key KS2 (one bit) of said 
second substitution means. 

1 7. (New) The computer readable storage medium, according to claim 
16, wherein each of said first and second substitution means comprises an initial 
permutation second, an exclusive OR, a substitution portion, and in inverse permutation 
section, and said initial permutation second performs bit permutation of a 64-bit Input 
and divides the permutation result into 8 blocks each comprising 8 bits, 

32-bit data comprised of the first four 8-bit blocks of the output of said initial 
permutation section are directly input to said substitution portion, and 32-bit data 
comprised of the remaining four blocks is exclusive-ORed with the intermediate key KD, 
and a result of the exclusive-OR operation is output to said substitution portion, 

said substitution portion outputs output data corresponding to an input using a 
permutation table when the 1-bit key KS is at "1", and outputs data identical to the input 
when the 1-bit key KS is at "0", and 
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said inverse permutation section receives the output data from said substitution 

portion, performs bit permutation of the received data, and outputs the data as 64-bit 

data. 



